Approved changes feed: RSS · Atom

cpe:2.3:a:sma:www.sunnyportal.com:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSma (1efbbc5e-4cf3-50a9-a854-112aa8e2c343)
ProductWww.Sunnyportal.Com (44931730-2a15-511c-99f5-90a2251037dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41645 vulnerable 2026-06-08 07:25:07.079605 SMA: Sunny Portal demo system privilege escalation
HIGH (8.6)
An unauthenticated remote attacker could use a demo account of the portal to hijack devices that were created in that account by mistake.
Published: 2025-05-13T08:47:33.564Z
Updated: 2025-05-13T13:11:10.091Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0731 vulnerable 2026-06-08 07:02:25.287537 SMA: Sunny Portal Remote Code Execution
MEDIUM (6.5)
An unauthenticated remote attacker can upload a .aspx file instead of a PV system picture through the demo account. The code can only be executed in the security context of the user.
Published: 2025-02-26T10:01:50.336Z
Updated: 2025-02-26T15:27:59.319Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.